Start Your Free Practice Test
Enter your details, then choose a 25-question Quick Test or the full 50-question, 90-minute practice test.
Hello, you are using an old browser that's unsafe and no longer supported. Please consider updating your browser to a newer version, or downloading a modern browser.
Check your readiness for the Microsoft Azure Administrator (AZ-104) exam with 50 exam-style questions across all five skill areas, each with an instant explanation. Free to take, with a 90-minute timer that matches the pace of the real exam, and retake it as often as you want.
New to AZ-104? Learn more about the certification →
Enter your details, then choose a 25-question Quick Test or the full 50-question, 90-minute practice test.
This free Microsoft AZ-104 practice test checks your readiness for the Azure Administrator exam with 50 exam-style questions across all five skill areas, each with an explanation for every answer choice, on a 90-minute timer that matches the pace of the real exam. Built by Training Camp and drawn from the same study guide we teach in our Azure Administrator (AZ-104) Boot Camp. New to the certification? Learn what an Azure Administrator does and who the exam is for. It is a readiness check, not a substitute for hands-on practice, but it will show you which skill area to work on next.
AZ-104 is organized into five weighted skill areas, and this test pulls questions from each: Manage Azure identities and governance (20-25%), Implement and manage storage (15-20%), Deploy and manage Azure compute resources (20-25%), Implement and manage virtual networking (15-20%), and Monitor and maintain Azure resources (10-15%). Microsoft does not publish an exact question count; candidates report between 40 and 60 questions, including case studies, with a 100-minute time limit. You need a score of 700 on a scale of 1 to 1000 to pass. Question formats include multiple choice, drag and drop, case studies and, on some deliveries, interactive components.
The exam leads to the Microsoft Certified: Azure Administrator Associate certification, which renews every twelve months through a free online assessment on Microsoft Learn. Microsoft refreshed the skills outline on April 17, 2026 with minor changes to the storage, compute, networking and monitoring areas, and the audience profile now expects hands-on experience with PowerShell, the Azure CLI, the portal, ARM templates or Bicep, and Microsoft Entra ID. We keep these questions aligned with the current published study guide.
Take it once cold to get a baseline, then read every explanation, including the ones you got right, because the incorrect-choice explanations are where similar features get separated (service endpoint versus private endpoint, availability set versus availability zone, Recovery Services vault versus Backup vault). Study your weakest skill area in a real subscription, because AZ-104 rewards people who have clicked through the portal and run the commands. Retake the test a few days later. The 90-minute timer over 50 questions is a little faster than the real exam's pace, which is deliberate: if you can finish here you will have time to read the case studies carefully on exam day.
Domains Covered · AZ-104
Entra ID users, groups and licenses, RBAC roles and scopes, Azure Policy, locks, tags, budgets.
Storage firewalls, SAS and stored access policies, redundancy, replication, Files and Blob features.
ARM templates and Bicep, VMs, disks, zones and scale sets, containers, App Service plans and slots.
VNets and subnets, peering, public IPs, routes, NSGs and ASGs, Bastion, endpoints, DNS, load balancers.
Azure Monitor metrics, logs and alerts, Insights, Network Watcher, Azure Backup, Site Recovery.
Four questions from the bank, one per domain, with the reasoning behind every answer. The full test has 50.
The help desk at a regional insurance company spends most Monday mornings resetting forgotten passwords for cloud-only Microsoft Entra ID users. The IT manager wants users in the Claims department to reset their own passwords after proving their identity with a phone or the Authenticator app, without opening a ticket. Which feature should the administrator enable and scope to the Claims group?
Correct. Self-service password reset lets users reset or unlock their own accounts after registering authentication methods such as a mobile phone or the Microsoft Authenticator app. It can be enabled for all users or scoped to a selected group, which is how you pilot it with one department.
A law firm stores case files in a storage account. Compliance requires that the account accept traffic only from the application subnet in the firm's virtual network and from the public IP range of the head office, and reject everything else from the internet. The firm does not want to remove the account's public endpoint entirely because the office has no VPN to Azure. What should the administrator configure?
Correct. The storage firewall lets you switch the account to "Enabled from selected virtual networks and IP addresses". You add the virtual network subnet, which enables a Microsoft.Storage service endpoint on it, and add the office's public IP range as an IP rule. All other public traffic is denied.
A platform team at a retail chain maintains one ARM template that deploys a web tier. The template is used for development, test and production, and each environment needs a different VM size and instance count supplied by the person running the deployment. Which section of the template should hold the VM size and instance count so they can be set at deployment time?
Correct. Parameters are the inputs of an ARM template or Bicep file. You declare the name, type, allowed values and defaults, and the deployer supplies values on the command line or in a parameter file, so one template serves every environment.
A network engineer at a small accounting firm is carving a subnet out of a 10.20.0.0/16 virtual network for six application VMs and does not expect the tier to grow. She wants the smallest subnet that will hold all six network interfaces. Which prefix length should she use?
Correct. A /28 has 16 addresses. Azure reserves five in every subnet (the network address, the default gateway, two for Azure DNS mapping and the broadcast address), leaving 11 usable addresses, which covers six VMs with room to spare and is the smallest prefix that does.
Every one of the 50 questions works this way: an explanation for the right answer and for the one you picked, so a wrong answer teaches you something. Questions last reviewed against the current Microsoft Azure Administrator (AZ-104) objectives.
Quick answers about the test, the Microsoft Azure Administrator (AZ-104) exam, and how to prepare.
Yes. Training Camp's Microsoft AZ-104 practice test is free to take, with 50 exam-style questions across all five Azure Administrator skill areas and an explanation for every answer choice.
It is 50 multiple-choice scenario questions drawn from all five AZ-104 skill areas, with an instant explanation after each answer and a 90-minute timer that matches the pace of the real exam. You can retake it as often as you want. It is a readiness check, not a substitute for hands-on preparation.
Microsoft does not publish an exact count. Candidates report between 40 and 60 questions, including one or more case studies, with a 100-minute time limit. Formats include multiple choice, drag and drop, case studies and sometimes interactive components.
You need a score of 700 on a scale of 1 to 1000. Microsoft uses scaled scoring, so 700 does not mean 70 percent of the questions answered correctly, and there is no minimum score per skill area.
AZ-104 covers five skill areas: Manage Azure identities and governance (20-25%), Implement and manage storage (15-20%), Deploy and manage Azure compute resources (20-25%), Implement and manage virtual networking (15-20%), and Monitor and maintain Azure resources (10-15%).
AZ-104 is an intermediate, role-based exam. Microsoft expects you to have real experience administering Azure with the portal, PowerShell, the Azure CLI and ARM templates or Bicep, and the questions test how you would configure something, not just what a service is. Candidates coming straight from Azure Fundamentals (AZ-900) usually find networking and storage access the hardest areas.
It renews every twelve months. Microsoft role-based certifications, including Azure Administrator Associate, are kept current by passing a free online renewal assessment on Microsoft Learn within the renewal window, rather than by retaking the full exam.
Start with Microsoft's published study guide and the free Microsoft Learn learning paths, build a lab subscription and configure the features yourself, then use practice questions like these to find weak spots. If you want to prepare with an instructor and your exam voucher included, see our Azure Administrator (AZ-104) Boot Camp.